process

4
Object Manager (II)
In part, a heap manager…
Allocates memory for data structure from system-wide, kernel
space heaps (pageable or nonpageable)
… with a few extra functions:
Assigns name to data structure (optional)
Allows lookup by name
Objects can be protected by ACL-based security
Provides uniform naming, sharing, and protection scheme
Simplifies C2 security certification by centralizing all object
protection in one place
Maintains counts of handles and references (stored pointers in
kernel space) to each object
Object cannot be freed back to the heap until all handles and
references are gone